Level 5: Controlled Unclassified Information
Level 5 accommodates CUI that requires a higher level of protection as deemed necessary by the information owner, public law, or other government regulations. Level 5 also supports unclassified National Security Systems (NSSs) due to the inclusion of NSS specific requirements in the FedRAMP+ controls/control enhancements (C/CEs).
As such, NSS must be implemented at Level 5 or higher.
Is the data/information unclassified information that under law or policy requires protection from unauthorized disclosure as described above and established by Executive Order 13556 (November 2010) or other
mission critical data that must be held at a higher level than Level 4?
A “No” here suggests that the data/information is classified SECRET
and therefore has to be held at a higher level than Level 5